SAP NS2 Technical Contributor / Application Administrator

We help the world run better At SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We're builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what's next. The work is challenging – but it matters. You'll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What's in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed.        COMPANY DESCRIPTION    SAP is the global market leader for business software and related services. SAP National Security Services Inc.® (SAP NS2®) is an independent U.S. subsidiary of SAP. At SAP NS2, we leverage best-in-breed technologies engineered by SAP to protect the lives, assets and information of Americans. We offer SAP solutions with specialized levels of security and support to meet the requirements of U.S. national security and critical infrastructure customers.   Must be a US Citizen; this position requires access to customer data. All internals must have Manager’s approval to transfer.     Required Qualifications

U.S. citizenship. Work is performed in a federally controlled environment. Hands-on production administration of a SIEM or large-scale data platform — Splunk, Elastic, Microsoft Sentinel, Chronicle, QRadar, or comparable — including data onboarding, access administration, and capacity management. Demonstrated automation of administrative work: scripting in Python, PowerShell, or Bash, and configuration management such as Ansible, applied to real production tasks. Be prepared to describe specific manual processes you replaced and what that saved. Working fluency with platform REST APIs for bulk auditing, configuration, and tooling. Git and version-controlled configuration, including experience deploying platform configuration or content through an automated pipeline. Strong query skills in at least one platform language (SPL, KQL, Lucene or ES DSL, or SQL), with specific before and after performance results the candidate can describe. Linux administration fundamentals: services, filesystems, networking, TLS, and log troubleshooting. Excellent written documentation skills. Be prepared to provide a writing sample such as a runbook, design document, or migration plan you authored. Demonstrated change management discipline and the ability to own a workstream end to end with little oversight.

Splunk administration experience, a current Splunk Enterprise or Cloud Certified Admin, or an equivalent certification on another major SIEM. Splunk is the current primary platform. Ansible at scale: roles and playbooks for platform configuration, application deployment, and agent or forwarder management across many hosts. Infrastructure as code (Terraform or CloudFormation) and hands-on cloud administration, AWS preferred. CI/CD pipeline construction (GitLab CI, GitHub Actions, or Jenkins) for configuration and content deployment. Containers and orchestration (Docker, Kubernetes). Data pipeline and log routing tooling such as Cribl, Kafka, or Kinesis Firehose. Experience with a second SIEM or data platform, or with a large-scale platform migration or consolidation. Administration of multiple environments or enclaves, including regulated environments such as FedRAMP or IL5. Security operations context: detection engineering, log source coverage, SOC support, or premium security content such as Enterprise Security or ITSI. Capacity planning and subscription cost control for a metered platform.

Bring out your best SAP innovations help more than four hundred thousand customers worldwide work together more efficiently and use business insight more effectively. Originally known for leadership in enterprise resource planning (ERP) software, SAP has evolved to become a market leader in end-to-end business application software and